PalTech is committed to maintaining the privacy, confidentiality, and security of personal information. Our data handling practices are aligned with the California Consumer Privacy Act, as amended by the California Privacy Rights Act.

This statement applies specifically to personal information of California residents and should be read in conjunction with our Privacy Policy and Cookie Policy, which provide additional detail on how we collect, process, and safeguard data across our digital properties.

Scope of Application

This statement applies to personal information collected through:

  • PalTech websites and digital platforms
  • Client and partner engagements
  • Marketing, events, and business communications

Categories of Personal Information

PalTech may collect and process the following categories of personal information:

  • Identifiers (e.g., name, email address, phone number)
  • Professional or employment-related information
  • Internet or network activity (e.g., browsing behaviour, interaction data)
  • Device and usage information
  • Inferences derived to improve service delivery and user experience

Where applicable, sensitive personal information is processed in accordance with California regulatory requirements and internal governance policies.

Purpose of Processing

Personal information is processed for legitimate business and operational purposes, including:

  • Delivery and enhancement of services
  • Communication and relationship management
  • Security monitoring and fraud prevention
  • Compliance with legal and regulatory obligations

We limit processing to what is necessary and proportionate to these purposes.

Sharing and Disclosure of Information

Personal information may be disclosed to:

  • Authorized service providers and vendors supporting business operations
  • Technology partners enabling platform and infrastructure services
  • Regulatory or legal authorities where disclosure is required

PalTech does not sell personal information for monetary consideration.

Where data sharing may fall under the definition of “sale” or “sharing” under applicable law, we provide mechanisms to exercise opt-out rights.

California Residents Privacy Rights

Subject to verification and applicable conditions, you (as a California Resident) have the right to:

  • Request access to personal information collected and processed
  • Request deletion of personal information
  • Request correction of inaccurate personal information
  • Opt out of the sale or sharing of personal information
  • Limit the use and disclosure of sensitive personal information

PalTech does not discriminate against individuals for exercising these rights.

Do Not Sell or Share My Personal Information

California residents may exercise their right to opt out of the sale or sharing of personal information by contacting us at privacy@pal.tech

We honor Global Privacy Control (GPC) signals where technically feasible.

Exercising Your Rights

Requests to exercise your rights under applicable law may be submitted by:

To help us process your request efficiently, please include sufficient information to verify your identity and specify the nature of your request.

We will verify your identity prior to fulfilling any request and respond within the timelines prescribed by applicable law.

Authorized agents may submit requests on behalf of individuals, subject to appropriate authorization and verification.

Data Retention

Personal information is retained only for as long as necessary to fulfill the purposes outlined in this statement, or as required by law, regulatory obligations, or legitimate business needs.

Retention practices are governed by internal data classification and lifecycle management policies.

Data Security and Governance

PalTech implements appropriate administrative, technical, and organizational safeguards to protect personal information against unauthorized access, disclosure, alteration, or destruction.

Our approach includes:

  • Controlled access and identity management
  • Data classification and governance frameworks
  • Continuous monitoring and risk mitigation practices

Updates to This Statement

This statement may be updated periodically to reflect changes in legal, regulatory, or operational requirements.